rsu14.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 10:5e:2b:f9:a8:02:63:9e:13:44:98:e5:ae:f8:6e:56 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rsu14.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:5e:2b:f9:a8:02:63:9e:13:44:98:e5:ae:f8:6e:56
Serial Number (int): 21756615760682720769072041386166480470
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: c6:bd:b7:86:17:47:ec:f6:df:e9:21:f4:7d:e6:4a:12:94:98:c8:49
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): e4:69:4d:47:57:d7:b0:cf:b2:0d:df:8b:37:91:28:94:77:54:b1:18
Fingerprint (sha256): 67:77:ed:3c:a6:4f:0b:69:6a:4b:e0:d4:76:90:86:f4:04:97:76:bb:ed:f4:3b:69:c4:2b:57:94:f0:8f:45:73

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/IbyzN5Rt8TI
CRL Distribution Point: http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl

Check the revocation status for certificate rsu14.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rsu14.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rsu14.org

Other certificates including the domain name rsu14.org

(limited to 100 certificates)
wps.windhamraymondschools.org
admin.dm.aceroschools.org
ex2010.ad.wsd.windham.k12.me.us
www.cfn.edu.mx
ex2010.ad.wsd.windham.k12.me.us
www.windham.k12.me.us
admin.wjh.wintersisd.org
www.windham.k12.me.us
admin.alamo.otsegops.org
fhclergue.adsb.on.ca
3rcs.org
academy.pycsd.org
jsms.rsu14.org
academyofthecanyons.net
academy.ndasla.org
admin.wcms.mpusd.net
admin.pas.pusdschools.net
wps.rsu14.org
admin.alamo.otsegops.org
admin.jsms.rsu14.org
res.rsu14.org
academy.ndasla.org
academy.pycsd.org
3rcs.org
ros.ldcsb.ca
www.windham.k12.me.us
admin.bme.manorisd.net
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
eastprimary.kiskiarea.org
public.rsu14.org
public.rsu14.org
admin.agu.ealas.org
*.rsu14.org
admin.bcca.bibbed.org
admin.whs.rsu14.org
olson.mpusd.net
admin.res.rsu14.org
admin.shackelford.wisd.org
academy.ndasla.org
admin.hg.aceroschools.org
rsu14.org
wes.bibbed.org
admin.e3civichigh.com
admin.keillerleaders.org
admin.aspiraacademy.org
athletics.rsu14.org
admin.alamo.otsegops.org
3rcs.org
admin.crumpton.mpusd.net
admin.lng.otsegops.org
admin.op.aceroschools.org
rsu14.org
windhamraymondschools.org
admin.whs.rsu14.org
es.glendaleacademy.org
admin.e3civichigh.com
www.rsu14.org
3rcs.org
www.otsegops.org
admin.rsu14.org
ex2010.ad.wsd.windham.k12.me.us
www.windhamraymondschools.org
admin.alamo.otsegops.org
rsu14.org
admin.mas.mpusd.net
ohs.otsegops.org
shs.smithvilleisd.org
3rcs.org
admin.delreywoods.mpusd.net
www.calvaryschools.org
admin.athletics.rsu14.org
mailgateway.rsu14.org
admin.echs.woccisd.net
vdi.rsu14.org
ex2010.ad.wsd.windham.k12.me.us
admin.gaines.pusdschools.net
admin.es.glendaleacademy.org
3rcs.org
shs.mpusd.net
admin.alamo.otsegops.org
northprimary.kiskiarea.org
admin.alamo.otsegops.org
admin.athletics.rsu14.org
admin.phs.pusdschools.net
acsaregionxv.org
admin.athletics.rsu14.org
laicharter.org
bchs.ppsb.org
rsu14.org
admin.bme.manorisd.net
admin.aspiraacademy.org
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
res.rsu14.org
admin.stfinnbarr.org
acsaregionxv.org
jsms.rsu14.org
admin.cchs.mpusd.net

Certificate

The complete raw certificate details for rsu14.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMo7wT7OZr22zb+ZxRN
2JUCeUZ1ZwnRGHEqvq1U3QTbgPJ5UMCslZYxpyfCKOnFoXfHJDXuaj9ucb+Ek2SA
LC4l/B/APT9GCV2ijcpcaePPe6jESGiMW+qlyB5zi8p/f/PO/h30XreABIt0yBs6
rDWmqE1hk0D1V9f3r/YIFTuY3eeP6bRo3yHxD/QmguihLqmFxlqQEp73+p/YZr7f
If0txutCYxaX8QZwjT4mamtcTPswuELgjVPmvh6TmRDp4wltL/xqv+WAhJqAOAqt
8U/0etlk4oQFDEgkiXXTWytIouxYsXQbt0uMdEdoG3d7Pr4vXngUCnsLSZHdXs1S
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21756615760682720769072041386166480470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 13:21:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 13:21:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rsu14.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23631790914192563807012597080689380807440466574102042035771487033162974805710710172504719592306212798655753716773496512656835034690369339079759819361189323050644147223797134956306041859604133981743115440730209157918915714080764197764790500924780701269380554202306447176611243271929030380262444235512447311145326482942858736166435898940287849255708919378247774538146947205045860850378527538304944864030982263498524102558098635307043447300380869110527952750936717661501913114265707384954528928744329252295133805018461674483730151580213293244922766907637690838512493367989727215464771092008289673633327625765666551583363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6bdb7861747ecf6dfe921f47de64a129498c849
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/IbyzN5Rt8TI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsu14.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/zBuRhFiJhCc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e142453a60000040300473045022100e6dcd406c62746ac6cf58ca3efe5a175c3256ccdaf8c6a73c5a73dd770757216022015d35aeba04bf9108afcbb57f35d6ba0c19a0c01a5da2821f69648d830941b3b00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e142453b9000004030046304402200a292a59166520e5283ed049439d30d84d1ca37d13997c146cb839a6dc5b0bdc0220662baefffa18662c03b52cdc28dbabbb86e3f6e43b8309f46b6bc7190af194ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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